Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File: sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier: 8LlZOQvR1xpFRp2iRolMLK4QRU6qcBM1/ga+LUx0RxQ=
Subject key identifier: 3F:91:4F:CD:67:93:45:D9:C0:8F:DA:F6:7A:B5:AE:5D:BF:93:65:F7
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial: 0197B6A10F5DDDD7525D12A1E2B49178845A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number: 09A4
Signing time: Sat 28 Jun 2025 13:01:37 +0000
Manifest this update: Sat 28 Jun 2025 13:01:37 +0000
Manifest next update: Sun 29 Jun 2025 13:01:37 +0000
Files and hashes: 1: E6bot_tKJqCzADpBxFeKtsutgCs.roa (hash: IzVVajCV/IB0bxI8d5Bqo7CZjFjDagAuPrwaJPvu9o8=)
2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: A6JT0r5AfbuSboJmwLu6pSC+69YxlxahpH2EuHEo2XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:0f:5d:dd:d7:52:5d:12:a1:e2:b4:91:78:84:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Validity
Not Before: Jun 28 13:01:37 2025 GMT
Not After : Jun 29 13:01:37 2025 GMT
Subject: CN=3f914fcd679345d9c08fdaf67ab5ae5dbf9365f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:78:3b:01:74:52:11:25:a8:20:15:b8:0b:d6:
c7:14:4a:a9:d2:f2:09:fd:9c:1f:c4:41:1a:79:90:
a2:45:94:ac:68:67:79:82:ba:71:1d:bb:cc:13:6d:
6c:4c:4c:55:19:08:f5:f5:24:97:cc:3d:0d:14:c1:
cb:7b:44:44:50:1c:5c:ee:89:5a:a3:24:2e:83:1d:
47:da:78:32:0b:8a:5e:0c:d1:a2:02:14:aa:25:d6:
3c:65:aa:90:4d:cf:c7:9f:9c:d1:5b:54:90:5e:53:
b9:ff:3e:99:b0:2a:f6:53:90:d5:c2:80:7d:af:88:
b9:9d:3f:23:86:c8:b5:33:4b:56:25:a6:97:be:69:
14:09:73:d9:41:6f:80:a5:ed:ce:1d:59:20:0f:ff:
24:55:02:06:80:37:0c:68:0d:c0:d1:37:91:89:48:
5b:c0:c8:8e:5b:9d:b7:af:84:3d:db:e5:fa:a1:d5:
65:05:72:38:df:e7:d3:12:dc:51:13:da:81:df:bc:
04:69:50:31:fd:e5:72:75:38:a1:e7:66:55:2a:6a:
f0:ca:f4:06:31:3b:fa:09:e3:13:df:17:b3:bf:40:
8a:43:7e:4b:86:b0:6b:f4:d5:17:f8:77:f4:cf:46:
b9:0a:c0:e5:af:18:67:fa:b6:0f:b7:a5:54:b8:41:
8f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:91:4F:CD:67:93:45:D9:C0:8F:DA:F6:7A:B5:AE:5D:BF:93:65:F7
X509v3 Authority Key Identifier:
keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e4:26:99:cf:95:89:ce:53:1b:7f:a8:2e:14:76:c0:14:39:
e4:5a:5f:93:5f:cf:22:82:64:6a:69:0c:6d:4d:6d:de:e5:77:
7d:3b:91:a0:22:87:af:83:89:f4:6b:23:52:43:02:9a:8e:55:
b7:d0:01:cc:f5:48:81:e9:00:d3:e0:13:af:94:35:b3:56:d1:
59:66:8a:83:15:56:09:02:34:fd:02:a3:69:03:1d:78:9a:4b:
ea:56:4e:58:85:2f:87:d8:0f:16:a1:82:b1:ab:d6:43:54:fa:
ec:b8:b5:c8:2a:8f:7b:c8:8c:d1:54:02:b0:64:bd:03:5a:3a:
4c:53:bb:b5:73:3e:12:ac:e1:02:4e:ec:b4:3c:30:e1:2e:9f:
ca:0f:16:3b:cb:91:ac:0a:ea:86:4f:06:4a:0f:f5:e0:33:64:
4d:0b:be:bf:c4:a3:b8:d7:3e:4d:cb:41:ef:35:47:61:3a:cf:
8a:1b:37:82:ad:77:6b:48:3c:f2:59:58:50:14:71:66:91:07:
b6:89:f3:8d:1c:01:86:34:ef:b0:b1:5f:e4:c1:f3:e1:f6:a7:
e3:9b:4e:2b:e9:23:da:b1:c0:d9:67:d1:03:9c:8c:4d:00:2b:
29:80:3c:1d:9d:cf:a2:a1:a2:d5:a1:d8:33:7f:86:6c:0d:79:
57:24:91:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:02 2025 by rpki-client